Any updates that come through the Windows Updates app in Settings should be considered safe, and they will automatically download from Microsoft through that app. Do not download Windows updates from other unknown sources as they might not be legitimate updates.